[linux] annotated tag debian/4.9.30-2+deb9u5_bpo8+1 created (now 2b6f8d2)

[debian-kernel at lists.debian.org]

This is an automated email from the git hooks/post-receive script.

benh pushed a change to annotated tag debian/4.9.30-2+deb9u5_bpo8+1
in repository linux.

        at  2b6f8d2   (tag)
   tagging  943dfbb56cf8c2527ae092f41840a0e46ba0d520 (commit)
  replaces  debian/4.9.30-2+deb9u2_bpo8+1
 tagged by  Ben Hutchings
        on  Thu Sep 28 19:18:10 2017 +0200

- Log -----------------------------------------------------------------
Release linux (4.9.30-2+deb9u5~bpo8+1).
-----BEGIN PGP SIGNATURE-----
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=04vD
-----END PGP SIGNATURE-----

Ben Hutchings (11):
      [x86] KVM: fix singlestepping over syscall (CVE-2017-7518)
      binfmt_elf: use ELF_ET_DYN_BASE only for PIE (CVE-2017-1000370, CVE-2017-1000371)
      Add fixes for CVE-2017-1000380
      xfrm: policy: check policy direction value (CVE-2017-11600)
      packet: fix tp_reserve race in packet_set_ring (CVE-2017-1000111)
      udp: consistently apply ufo or fragmentation (CVE-2017-1000112)
      Add various security fixes
      Add Debian bug # for CVE-2017-1000251
      Prepare to release linux (4.9.30-2+deb9u4).
      [amd64] mm: revert ELF_ET_DYN_BASE base changes (fixes regression of ASan)
      Merge tag 'debian/4.9.30-2+deb9u5' into jessie-backports

Salvatore Bonaccorso (11):
      [x86] drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl() (CVE-2017-7346)
      rxrpc: Fix several cases where a padded len isn't checked in ticket decode (CVE-2017-7482)
      brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (CVE-2017-7541)
      ipv6: avoid overflow of offset in ip6_find_1stfragopt (CVE-2017-7542)
      [x86] drm/vmwgfx: Make sure backup_handle is always valid (CVE-2017-9605)
      drm/virtio: don't leak bo on drm_gem_object_init failure (CVE-2017-10810)
      xen-blkback: don't leak stack data via response ring (CVE-2017-10911)
      mqueue: fix a use-after-free in sys_mq_notify() (CVE-2017-11176)
      fs/exec.c: account for argv/envp pointers (CVE-2017-1000365)
      dentry name snapshots (CVE-2017-7533)
      Prepare to release linux (4.9.30-2+deb9u3).

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  943dfbb   Merge tag 'debian/4.9.30-2+deb9u5' into jessie-backports

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git